Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Vrp07j5_m-8oYaH_mYFXweFDu4Q.roa
File: Vrp07j5_m-8oYaH_mYFXweFDu4Q.roa (raw, json)
Hash identifier: s6TBQv6Y4JxstjmwjXVQPG/uns+3Xk5Il16CDV9E4jQ=
Subject key identifier: 56:BA:74:EE:3E:7F:9B:EF:28:61:A1:FF:99:81:57:C1:E1:43:BB:84
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 0190F34949D81E112CB0875253AA8EAA4EF0
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Vrp07j5_m-8oYaH_mYFXweFDu4Q.roa
Signing time: Sat 27 Jul 2024 08:23:04 +0000
ROA not before: Sat 27 Jul 2024 08:23:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8903
IP address blocks: 45.10.104.0/22 maxlen: 22
45.83.50.0/24 maxlen: 24
80.66.112.0/23 maxlen: 23
80.66.114.0/24 maxlen: 24
80.66.115.0/24 maxlen: 24
80.66.116.0/24 maxlen: 24
80.66.117.0/24 maxlen: 24
80.66.118.0/24 maxlen: 24
80.66.119.0/24 maxlen: 24
80.66.120.0/23 maxlen: 23
80.66.122.0/24 maxlen: 24
80.66.123.0/24 maxlen: 24
80.66.124.0/24 maxlen: 24
80.66.125.0/24 maxlen: 24
80.66.126.0/24 maxlen: 24
80.66.127.0/24 maxlen: 24
85.209.72.0/22 maxlen: 22
89.42.70.0/24 maxlen: 24
89.42.71.0/24 maxlen: 24
89.44.150.0/24 maxlen: 24
89.44.151.0/24 maxlen: 24
89.45.208.0/24 maxlen: 24
89.45.209.0/24 maxlen: 24
91.132.31.0/24 maxlen: 24
94.198.46.0/24 maxlen: 24
94.198.47.0/24 maxlen: 24
178.19.32.0/24 maxlen: 24
178.19.33.0/24 maxlen: 24
178.19.34.0/24 maxlen: 24
178.19.35.0/24 maxlen: 24
178.19.44.0/24 maxlen: 24
178.19.45.0/24 maxlen: 24
178.19.46.0/23 maxlen: 23
178.19.47.0/24 maxlen: 24
185.71.28.0/24 maxlen: 24
185.203.21.0/24 maxlen: 24
185.203.22.0/24 maxlen: 24
185.203.23.0/24 maxlen: 24
185.229.212.0/24 maxlen: 24
185.229.213.0/24 maxlen: 24
185.229.215.0/24 maxlen: 24
185.242.175.0/24 maxlen: 24
194.15.140.0/24 maxlen: 24
194.15.146.0/24 maxlen: 24
194.15.182.0/24 maxlen: 24
194.15.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 28 Jul 2024 20:44:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:f3:49:49:d8:1e:11:2c:b0:87:52:53:aa:8e:aa:4e:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jul 27 08:23:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=56ba74ee3e7f9bef2861a1ff998157c1e143bb84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:7a:72:41:67:37:e2:7c:e5:6d:92:91:c0:41:
de:9e:56:dd:1b:e3:fb:6f:14:84:f2:cc:8a:20:c4:
01:23:d8:53:6a:ba:f4:1d:b7:b0:de:4a:61:bf:ab:
54:28:8e:3a:36:9e:52:fb:3c:e9:1a:8d:32:bb:6e:
17:d9:ee:da:84:65:7d:84:01:b3:55:a3:ef:a3:97:
f5:16:81:b8:fc:3a:8c:64:0d:a5:f6:d0:4f:3a:a1:
af:bd:18:e8:da:83:de:96:e5:0c:8e:57:32:5c:bb:
e6:3a:f5:b6:41:fe:d3:04:33:3f:dc:ef:cb:f0:35:
a8:24:d0:29:2d:b8:87:fe:b2:f7:84:20:7b:a3:0a:
19:4c:bc:b1:af:30:2b:87:42:08:9d:45:f4:9c:c4:
5d:ea:78:49:a9:10:cf:62:3c:5f:12:86:24:5a:62:
2c:56:43:b5:d5:72:ae:8a:55:72:81:f7:d7:15:3a:
57:c9:6b:c9:e4:2b:7b:5d:ce:77:53:9e:f6:f0:6e:
ee:04:f4:57:44:66:4e:0b:54:b4:8c:f7:f0:91:7c:
3c:ac:da:a2:ef:dc:61:37:99:e0:da:8d:8f:3c:84:
fd:3b:e4:3d:3f:9b:5c:1e:a0:33:c9:8c:52:a9:06:
ef:df:f2:47:87:f8:b3:7f:10:f8:84:0c:02:fb:41:
bc:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:BA:74:EE:3E:7F:9B:EF:28:61:A1:FF:99:81:57:C1:E1:43:BB:84
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Vrp07j5_m-8oYaH_mYFXweFDu4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.104.0/22
45.83.50.0/24
80.66.112.0/20
85.209.72.0/22
89.42.70.0/23
89.44.150.0/23
89.45.208.0/23
91.132.31.0/24
94.198.46.0/23
178.19.32.0/22
178.19.44.0/22
185.71.28.0/24
185.203.21.0-185.203.23.255
185.229.212.0/23
185.229.215.0/24
185.242.175.0/24
194.15.140.0/24
194.15.146.0/24
194.15.182.0/24
194.15.195.0/24
Signature Algorithm: sha256WithRSAEncryption
33:0d:0e:e7:ee:0c:f9:e4:cc:d0:15:5e:08:92:83:49:d0:b5:
da:a3:72:e5:56:90:82:1b:7c:43:fd:ff:ee:0d:72:e6:9b:3f:
96:93:71:12:9b:a8:d0:d2:a6:27:21:d3:d2:39:eb:1c:a3:08:
87:c9:15:4f:3e:16:5e:99:e9:0b:ed:01:b9:e2:93:9f:a7:9c:
7d:ac:d7:fb:b0:3f:ff:6f:b0:1f:3e:13:32:86:63:78:35:c4:
73:f8:6a:eb:29:f0:37:8d:09:02:14:aa:21:54:6a:2d:1e:39:
d1:59:56:7f:27:5a:d6:79:de:15:3f:f5:fe:63:27:c1:cb:35:
b0:1a:35:5c:40:c7:58:9d:c0:84:33:2d:38:80:a3:29:c9:60:
8e:91:ca:2d:5f:9c:41:fa:ec:4e:6d:bf:3f:6f:63:48:9e:f8:
9c:ca:8c:e4:0e:f2:e8:64:1f:91:8b:dd:31:ef:42:6c:c2:b5:
b0:07:66:0e:4d:22:e4:5d:20:09:15:3f:0a:a8:43:4d:f1:a3:
17:64:cf:be:79:ca:ad:67:c5:61:22:b2:1c:c1:f4:ce:88:4b:
f9:28:12:d6:ea:5e:7c:f2:26:67:aa:b8:13:8a:e2:a1:cf:34:
48:db:7b:12:68:a8:be:74:3b:de:56:61:46:85:77:4f:8b:f3:
a8:34:2f:c7
-----BEGIN CERTIFICATE-----
MIIFfDCCBGSgAwIBAgISAZDzSUnYHhEssIdSU6qOqk7wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy
N2E0NjcwHhcNMjQwNzI3MDgyMzA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NmJhNzRlZTNlN2Y5YmVmMjg2MWExZmY5OTgxNTdjMWUxNDNiYjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6HpyQWc34nzlbZKRwEHenlbdG+P7
bxSE8syKIMQBI9hTarr0Hbew3kphv6tUKI46Np5S+zzpGo0yu24X2e7ahGV9hAGz
VaPvo5f1FoG4/DqMZA2l9tBPOqGvvRjo2oPeluUMjlcyXLvmOvW2Qf7TBDM/3O/L
8DWoJNApLbiH/rL3hCB7owoZTLyxrzArh0IInUX0nMRd6nhJqRDPYjxfEoYkWmIs
VkO11XKuilVygffXFTpXyWvJ5Ct7Xc53U5728G7uBPRXRGZOC1S0jPfwkXw8rNqi
79xhN5ng2o2PPIT9O+Q9P5tcHqAzyYxSqQbv3/JHh/izfxD4hAwC+0G8xwIDAQAB
o4ICiDCCAoQwHQYDVR0OBBYEFFa6dO4+f5vvKGGh/5mBV8HhQ7uEMB8GA1UdIwQY
MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt
Y2Q3ZTA2Y2JiNTMxLzEvVnJwMDdqNV9tLThvWWFIX21ZRlh3ZUZEdTRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx
LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGdBggrBgEFBQcBBwEB/wSBjTCBijCBhwQCAAEwgYADBAIt
CmgDBAAtUzIDBARQQnADBAJV0UgDBAFZKkYDBAFZLJYDBAFZLdADBABbhB8DBAFe
xi4DBAKyEyADBAKyEywDBAC5RxwwDAMEALnLFQMEA7nLEAMEAbnl1AMEALnl1wME
ALnyrwMEAMIPjAMEAMIPkgMEAMIPtgMEAMIPwzANBgkqhkiG9w0BAQsFAAOCAQEA
Mw0O5+4M+eTM0BVeCJKDSdC12qNy5VaQght8Q/3/7g1y5ps/lpNxEpuo0NKmJyHT
0jnrHKMIh8kVTz4WXpnpC+0BueKTn6ecfazX+7A//2+wHz4TMoZjeDXEc/hq6ynw
N40JAhSqIVRqLR450VlWfyda1nneFT/1/mMnwcs1sBo1XEDHWJ3AhDMtOICjKclg
jpHKLV+cQfrsTm2/P29jSJ74nMqM5A7y6GQfkYvdMe9CbMK1sAdmDk0i5F0gCRU/
CqhDTfGjF2TPvnnKrWfFYSKyHMH0zohL+SgS1upefPImZ6q4E4rioc80SNt7Emio
vnQ73lZhRoV3T4vzqDQvxw==
-----END CERTIFICATE-----
Generated at Sun Jul 28 23:43:49 2024 by rpki-client on console-ams.rpki-client.org